Privacy Policy

1. Introduction

Dul Legal ("we", "us", "our") is committed to protecting the personal data of individuals who contact us, use our website, or engage our legal services. This Privacy Policy explains how we collect, use, store, and protect your personal information, and what rights you have in relation to that data.

This policy applies to all personal data processed by Dul Legal in connection with our website at dullegalad.pro and our legal services relating to pension matters. We operate from 74/3 Rama IV Road, Khlong Toei, Bangkok 10110, Thailand.

We process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). If you have any questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: name, title
• Contact data: email address, telephone number, postal address
• Matter data: information you share about your pension situation during consultations or in correspondence
• Technical data: IP address, browser type, pages visited (via analytics cookies, if consented)
• Communication data: records of messages and correspondence between us

Data is collected through our website contact form, email, telephone, and in-person or remote consultations.

Legal Basis for Processing

• Consent: when you submit our contact form or agree to analytics cookies
• Contract: when processing is necessary to deliver a service you have engaged us for
• Legitimate interest: for responding to general enquiries and improving our services
• Legal obligation: where we are required to process data to comply with Thai law

Retention Periods

• Client matter data: retained for 7 years following the close of a matter
• Contact form enquiries: retained for 12 months
• Analytics data: retained for 26 months or as set by the analytics provider

3. How We Use Your Personal Data

We use personal data for the following purposes:

• Responding to enquiries and arranging consultations
• Delivering legal services you have engaged us to provide
• Communicating with you about the progress of your matter
• Maintaining records as required by our professional obligations
• Improving our website based on anonymised usage data (with consent)
• Complying with legal or regulatory requirements

We do not use your personal data for direct marketing without your explicit consent. We do not sell personal data to third parties.

Data Sharing

We may share data with third-party service providers (such as secure cloud storage or communications tools) where necessary to deliver our services. Any third parties we engage are required to handle personal data in accordance with Thai PDPA requirements. We may also disclose data where required by law or a court order.

4. Data Protection Measures

We take the security of personal data seriously. Our measures include:

• Secure, encrypted data storage for client matter files
• Access controls limiting data access to authorised staff only
• Regular review of data handling practices
• Secure deletion of data once retention periods expire
• Incident response procedures to address potential data breaches

In the event of a data breach that poses a risk to your rights, we will notify the PDPA supervisory authority and affected individuals as required by law.

5. Cookies

Our website uses cookies. Essential cookies are required for the site to function. Optional cookies (analytics, preferences) are only placed with your consent. For full details, please see our Cookie Policy.

6. Your Rights Under Thai PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the following rights:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data, subject to legal obligations
• Right to data portability: receive your data in a structured format
• Right to object: object to processing where we rely on legitimate interest
• Right to withdraw consent: where processing is based on consent, withdraw it at any time
• Right to complain: lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies independently before providing any personal data.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us so that we can arrange for its deletion.

9. Policy Updates

We may update this policy from time to time. Any material changes will be noted on this page with a revised Last Updated date. Continued use of our website or services following an update constitutes acceptance of the revised policy.

10. Contact for Data Matters

For any questions about this Privacy Policy or to exercise your rights, please contact: